ON A SPECIAL CONGRUENCE OF CARLITZ 
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Abstract. We prove that if q is a power of a prime p and p k divides 
a, with k > 0, then 

l + (g-l) £ (modp^). 

0<b(g-l)<a V V V 

The special case of this congruence where q = p was proved by Carlitz 
in 1953 by means of rather deep properties of the Bernoulli numbers. 
A more direct approach produces our generalization and several related 
results. 



1. Introduction 

Sums of binomial coefficients of the form 
a 



, , , \{XC{l,...,a}:\X\=r (mod d)}\ 
ba + r ; 



occur in combinatorics and number theory. Several classical results give 
information on the values of such sums modulo a prime or prime power. 
One of the oldest results of this type is due to Hermite, who proved in 1876 
that (in modern notation) a prime p divides X)&>o (f>(p-i)) if a is a positive 
odd integer (cf. |Dic66| p. 271]). Hermite's result was then generalized in a 
number of directions, the earliest due to Glaisher in 1899 (cf. [Dic66t p. 272]). 
Glaisher showed that 



for p a prime, a a positive integer, and 1 < r < p — 1, where a denotes the 
smallest positive integers congruent to a modulo p — 1. This can also be 
formulated by saying that the value modulo p of the left member of Q is 
a periodic function of a > with period p — 1. A proof of Glaisher 's result 
based on Lucas' theorem for evaluating binomial coefficients modulo a prime 
can be found in |Gra97| Section 6], but see the Introduction of |Sunj for a 
simpler proof. In Section [2] we present an easy generalization of Glaisher's 
result which gives an efficient formula for the value modulo p of the sum 
J2b (fcj+r)' wnere d is any integer prime to p. 
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In 1953 Carlitz |Car53j generalized Hermite's theorem to a prime power 
modulus by showing that 




= (mod p k+l ) 



if p is an odd prime and p k divides the positive integer a. (This is trivially 
true also for p = 2, because the left member equals 2 a in this case.) Unlike 
the proofs mentioned above of Glaisher's congruence (^Q), Carlitz's proof 
of (J21) is quite sophisticated. It relies on certain congruences satisfied by 
the Bernoulli numbers, namely that B m /m is a p-adic integer if (p — 1) \ m, 
see [D190, p. 238], and that {B m +p~ l — l)/m is ap-adic integer if (p— 1) | m, 
see |IR90| p. 247], the latter result being due to Carlitz himself. It seems 
that no other proof of Carlitz's congruence has ever appeared, except for the 
special case where p — 1 divides a, which follows from |ST| Corollary 1.1]. 

It appears most natural to prove Carlitz's congruence ((2j) by multisection 
of series. In fact, this route allows us to prove the following generalization, 
which does not seem amenable to Carlitz's original approach. 

Theorem 1. If q is a power of a prime p and p k divides a, with k > 0, then 




= (mod 



Although our approach does not allow an evaluation modulo p k+1 (for 
k > 0) of the more general sum ^ b ( 6 ( ? J^_ r ) where r is any integer (except 
for the case where q — 1 divides a, considered in Corollary El below), it does 
produce the following remarkable symmetry. 

Theorem 2. Let p be a prime, q = p* , let h,k be nonnegative integers with 
h > k and f \ h + k, and let r, s be positive integers. Then we have 

(-ir E ( b{g % _ r ) - <-ir E % _ .) («* 

The case of Theorem |^1 where q—1 divides s has the following consequence, 
which complements Theorem ^ in the special case where q — 1 divides a. 

Corollary 3. If q is a power of a prime p, the number (q — l)p k divides a, 
with k > 0, and q—1 does not divide r, then 

(9-l)E( % _ a i)_r) S - ( - 1)Pr ( mod ^ +1 )' 

Carlitz went further in |Car53j by evaluating the left member of his con- 
gruence modulo p k+2 , in terms of the Bernoulli numbers -£>2s and Wilson's 
quotient w p = ((p— l)! + l)/p. With notation slightly adapted to our present 
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needs, Carlitz's result reads 
,3) p-Wl + (p-l) y. 



0<b(p—l)<sp k 



41- e ^ 



0<2j<sp k 



1 ^ (sp k - 1\ B 2j 

for p > 3 (although stated for p > 3 in |Car53j . see the beginning of our 
Section |IJ, where 5 S = 1 li p — 1 \ s — 1 and 6 S = otherwise. 

Congruence (jSJ) is useless for the purpose of a fast evaluation modulo p 
of its left member, because its right member is more complicated than the 
former, and contains more summands. The first of our couple of contribu- 
tions to © is a proof that the value modulo p of the left member of (j3J) 
is actually independent of k, which is not apparent from the form of the 
right member. In particular, the left member can be most conveniently 
evaluated modulo p by replacing k with 0, thus reducing the summation 
to about s/(p— 1) binomial coefficients. Although the deeper connection 
with Bernoulli numbers shown by Carlitz's sharper congruence © does not 
extend in an obvious way with a prime power q replacing p, we keep with 
the spirit of our previous results by allowing a prime power q in place of p. 

Theorem 4. Let q = p* be a power of a prime p, and let s be a positive 
integer. Then the value modulo p of the expression 

0<b{q~l)<sp k V KH " J 

as a function of k > (but k > 2 if p = 2 and s = 1), depends only on the 
remainder of k modulo f . 

It is quite easy to see, in a way which we point out in Remark 111! that 
when p is odd the value modulo p of the expression considered in Theorem |1] 
is also a periodic function of s > 0, with period dividing (q — l)p. Thus, one 
only needs consider the range < s < (q — l)p. Our final result displays a 
symmetry in the dependency on s which allows one to further restrict this 
range in certain cases. This is the only one among our results where we need 
to assume the prime p to be odd. We expand on the reasons for this after 
its proof in Section 

Theorem 5. Let q = pf be a power of an odd prime p, and let k be a 

nonnegative integer. Then the value modulo p k+2 of the expression 

1 + ( '- 1> E GJ-d) 

0<b(q-l)<sp k V V ^ ;/ 

is unaffected by replacing the positive integer s with p l — s, where t is any 
integer such that p t > s and f \ k + t. 

Computer calculations performed by means of the symbolic manipula- 
tion package MAPLE have been extremely useful for discovering and checking 
congruences, notably those of Theorems 21 and |SJ 
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2. Glaisher's CONGRUENCE 

A standard way of dealing with sums like that of Glaisher is based on the 
identity 

in the polynomial ring F[x], where F is any field containing a primitive dth 
root of unity u>. This is identity (1.53) in |Gou72j (where F is the complex 
field and uj = exp(27ri/d)), and follows by applying the more general formula 
for multisection of series |Com741 Chapter 1, Exercise 26] to the generating 
function of the binomial coefficients, (1 + x) n = £ m (m) 2 '" 1, Here we follow 
the standard convention that unrestricted summation indices run over the 
integers; however, the sum in Q is a finite sum since a is positive integer, 
if ( a ) is defined to be for c < 0, as usual. The following result is the 
generalization of Glaisher's congruence announced in the Introduction. 

Proposition 6. Let p be a prime, let a and d be positive integers with p\ d, 
and let r be an integer. If f is the period of p modulo d and a is the smallest 
positive integer congruent to a modulo pf — 1, then we have 

E( M + r ) s E( M + r ) ( mod ^- 

In particular, for d = q — 1 with q a power of p we have 

?(%-Vr)"(r) + (r + ^-l) 

First proof. Let u> a primitive dth root of unity in the finite field of q = pf 
elements F„. By evaluating the identity (jlj) for x = 1 we obtain 

E(; +r )-iE^(H«r. 

b v 7 ae(u) 

The desired conclusion follows since the right member of the equality, as a 
function of the positive integer a, depends only on the value of a modulo 
q-1. □ 

We give another proof which does not use multisection of series. 

Second proof. The sum ^2 b equals the coefficient of x r in the reduction 

of (1 + x) a modulo x d — 1. If cZ divides q — 1, then x d — 1 divides — 1, 
and we have 

(1- x) q = 1- x q = 1- x (mod x d -l). 

Consequently, (1 — x) a+ ^ q ~ 1 ^ = (1 — x) a (mod x d — 1) if a > 0, and the 
conclusion follows. □ 

Remark 7. The general case of Proposition El can also be deduced from its 
special case d = q - 1, by writing £ 6 ( M + r ) as £}!Ti £ 6 (%-i)+r+jJ > 
where d divides q — 1. 
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3. CARLITZ'S CONGRUENCE 

Carlitz's congruence can be read as an equality in the ring Z/p fc+1 Z. We 
could then prove it by applying a version of identity Q) over this ring. In 
fact, it is easily shown that identity holds in the polynomial ring R[x], 
where R is any commutative ring such that d ■ 1 is invertible in R, and lo 
is a unit of R such that ui d = 1 but w 1 — 1 is not a zero-divisor of R for 
< i < d. Instead of this approach, we adopt here the equivalent but more 
standard way of working in the (algebraic) integers and computing modulo 
pfe+i Nevertheless, a crucial ingredient of our proof of Carlitz's congruence 
would be the following basic fact concerning the finite ring Z/p fc+1 Z, for p 
odd [TRflOl Chapter 4]: its group of units is the direct product of two cyclic 
groups, one of order p — 1 and one of order p k . 

In order to generalize Carlitz's congruence and prove Theorem ^ we need 
a corresponding result for the ring R = 0/p k+1 0, where w is a primitive 
complex (q— l)-th root of unity and O is the ring of integers in the cyclotomic 
field Q(oj). Note that O/pO is the field of q elements ¥ q . 

Lemma 8. The group of units of R = 0/p k+1 0, for k > 0, is the direct 
product of a cyclic group of order q — 1 and the group 1 + pR of order q k . 
When p is odd the latter is isomorphic with the additive group pR, and hence 
has exponent p k . When p = 2, the group 1 + 2R is the direct product of its 
subgroup {±1} and a subgroup isomorphic with a subgroup of index two of 
the additive group 2R; in particular, 1 + 2R has exponent 2 k ~ 1 if q = 2, and 
2 k ifq>2. 

One can prove Lemma |S] in an elementary way by induction on k and 
similar calculations as those performed in the standard proof, given in IR90 ( 
Chapter 4, §1], of its special case where q = p (namely, Equation (J5J) in 
our proof of Theorem 0] in the next section) . Such a proof can be found 
in |McD74j . for example, where our Lemma |H] appears as Theorem XVI. 9, 
viewing R as the Galois ring GR(p k+1 , f). However, the following proof in 
the context of local fields seems more illuminating. 

Proof. The finite quotient ring R is unaffected if we replace Q(oj) with its 
completion <Q p (u>) with respect to the prime divisor pO. In other words, 
we may work in the algebraic closure C p of the field Q p of p-adic numbers, 
and let w be a primitive (q — l)th root of unity in C p . Then K = Q p (uj) is 
an unramified extension of Q p of degree f, hence with residue field F,j. If 
O = {x € K : v p (x) > 0} is the valuation ring of K, and P = {x € K : 
v p {x) > 1} is th e maxim al ideal of O, then 0/P k+1 ^ 0/p k+1 = R. 

According to FlobOO, (III.4.4)], the group of units of O splits into a direct 
product fi q -i x (1 + P), where fi q -i is the group of (q — l)th roots of unity 
in C p , which is generated by lu. Suppose first that p is odd. Since 1 + P 
does not contain any nontrivial root of unity with p-power order, [RobOO, 
(V.4.2)] shows that the logarithm map 

i+7->£(-ir~V7j 

i>o 

maps the multiplicative group 1 + P isomorphically and isometrically onto 
the additive group P. In particular, it maps 1 + P J onto P- 7 , for all positive 
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integers j. Consequently, the logarithm map induces an isomorphism of the 
multiplicative group (1 + P)/(l + P k+1 ) onto the additive group Pj ' P k+1 = 
pR. However, (1 + P) /(l + p fc+1 ) is the image of 1 + P in the quotient ring 
0/P k+1 , and hence is isomorphic with 1 + pR, as claimed. 

Suppose now that p = 2, and assume that k > as we may. Again accord- 
ing to |Rob001 (V.4.2)], the logarithm map gives a group homomorphism of 
1 + P into P with kernel \ii = {±1}, which is the set of roots of unity of 
2-power order in 1 + P. Its restriction to 1 + P 2 is an isometry onto P 2 , and 
hence maps 1 + P 3 bijectively onto P 3 for every j > 2. Because the index q 
of 1 + P 2 in 1 + P equals the index of P 2 in P, the logarithm maps 1 + P 
onto a subgroup of index two of P. Since, as before, 1 + 2R is isomorphic 
with (1 + P)/(l + P k+1 ), its quotient (1 + 2P)/{±1} is isomorphic with a 
subgroup of index two of 2R, call it A. This leaves only two possibilities 
for the group structure of 1 + 2R: either it is isomorphic with 2R, or it is 
the direct product of its subgroup {±1} and a subgroup isomorphic with A. 
The former possibility would entail that —1, being an element of order two, 
should belong to (1 + 2R) 2 < 1 + 4P, and is therefore to be excluded. □ 

The crucial part of Lemma |H] needed in the following proofs is the fact 
that the exponent of 1 + pR divides p k . 

Proof of Theorem^ Let u be a primitive complex (q — l)-th root of unity 
and let O be the ring of integers in the cyclotomic field Q(u). According to 
identity Q evaluated for x = 1, in O we have 




where n q ~\ = (o>). Since the elements a € U {0} are a set of represen- 
tatives for the cosets of the additive subgroup pO of O, so are the elements 
l + a. 

Now view the above equality in the quotient ring R = 0/p k+1 0, denoting 
by fiq-i the image of fi q -i in R. In particular, because (3{1 + pR) = (3 + 
pR for PgR, the elements 1 + a for a £ fiq-i U {0} \ {—1} are a set 
of representatives for the cosets of 1 + pR in the group of units U of R. 
According to Lemma |S1 the group U is the direct product of its subgroups 
fiq-i and 1 + pR, and the latter has exponent p k (or p k ^ 1 when q = 2, a 
trivial case here). Consequently, if P ranges over a set of representatives 

k 

for the cosets of 1 + pR in U, then P p ranges over the elements of p, q —i- 
Taking into account also the case where a = — 1, it follows that the elements 
(1 + a) p for a € fiq-i U {0} are distinct and coincide with the elements of 
/2g_ 1 U {0}. Hence, in the ring R we have 

0<b(q-l)<a v ^ ;/ 7e/Iq-iU{0} 

[0 if(g-l)K 
\q-l if (g- 1)| a. 
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In both cases it follows that 

' + £ («/_!))=» 

0<%-l)<a V vy 77 

in i?, which is equivalent to the desired conclusion. □ 

In general, it does not seem possible to evaluate similarly modulo p k+l 
the more complicated right member of the identity 



However, one can somehow interchange the roles of the elements a and 1 + a 
in this formula, as in the following proof. 

Proof of Theorem [U We adopt the same setting and notation as in the proof 
of Theorem We postpone to the end consideration of the case p = 2 and 
assume first that p is odd. 

Let a € fi q -i \ {—1} and consider the element (3 = (—1 — a) p of R. It is 
invertible and different from —1, because (3 = — 1 — a p ^ 0, —1 (mod P), 
where P denotes the image of P in R, the unique maximal ideal of R. 
Lemma El then implies that [3 has multiplicative order dividing q — 1, and 

k 

hence belongs to /2 ? _i\{— 1). Hence the correspondence a i— > (3 = (— 1— a) p 
maps fiq-i \ {— 1} into itself, and so does the map >« = (— 1 — (3) p , 
because h > k. We claim that these maps are inverse of each other. 

In fact, if (3 = (-l-a) pk then (-l-0) ph = (a pk ) ph = a (mod P), because 
a q = a. Since both (— 1— (3) p and a belong to fi g -i, the congruence must be 
an equality. Thus, the correspondence a h- ► /? = (— 1 — a) p is a permutation 
of \{-l}. 

Consequently, in ii we have 



Mq , 
b x y ' ae/ig-l\{-l} 

E 



E- £ (-l-^rpy 



which is equivalent to the desired conclusion. 

The only difference in the case p = 2 is that (3 is not invertible when 
a = 1 and, in fact, /? = (—1 — l) 2 = 0, because 2 k > k + 1. Hence, in this 

k 

case the map a i— > /3 = (—1 — a) p does not send /Z g _i \ {—1} = flq-i into 
itself, but it does send \ {1} into itself. Therefore, the final calculation 
remains valid by reading the summations over p, q -\ \ {1} rather than over 

/ViU-i}- ' ' □ 

Remark 9. When either r = or s = 0, but not both, the congruence given 
in Theorem |21 would be off by a summand l/(q — 1), as one can verify by 
going through the above proof in this anomalous situation. In fact, this 
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statement is equivalent to the special case of Theorem ^ where p k is a power 
of q. 

Remark 10. Because of the explicit formulas Y^k (fc) = ^" an( ^ Sfc (2/c) = 
Sfc (?fc+i) = 2 n_1 , which follow from Equation (0J, in the special cases 
where g = 2 or g = 3 the congruence stated in Theorem |2] reads 2 sp = 2 rp 
(mod 2 k+1 ), and 

(_1)» . 2 s ' 3fc - 1 = (-If • 2 r ' 3h - 1 (mod 3 fc+1 ), 

which are easy to verify directly. 

Remark 11. Proposition El (with our first proof, using Lemma |HJ) extends 
at once to deal with congruences modulo a prime power p k+1 . In view of 
Remark this extension boils down to the following statement, for p odd: 
for integers a and r with a a positive multiple of p k we have 



E 



a \ v — v / a 



" 1 (mod/ +1 ), 



, x b(q-l)+rJ ^ \b(q-l) +r 

where a is the smallest positive integer congruent to a modulo (q — l)p k . 
(When p = 2 the assertion holds only by taking a, a > k + 1, because of the 
exceptional role of a = 1 in the proof of Theorem [21 ) In the special case 
where p k divides a, such an assertion can also be deduced (in an admittedly 
twisted way) from Theorem |21 where the left member of the congruence is 
unaffected by adding to s any multiple of q — 1, because the right member 
does. 

Proof of Corollary\Q Write a = sp k , thus q — 1 | s, and hence (— l) s = 1. 
Choose an integer h such that h > k and q — 1 | h + k. Using Theorem |^1 
and Theorem ^ in turn we obtain 

(« - » E (/,(, ^ _ r ) - (-v ■ (« - 1) E (k^d) - -Mr. 

the congruences being modulo □ 

Remark 12. The above proof of Corollary |31 exploits the special case of 
Theorem [21 where q — 1 divides s but not r. In contrast, the special case of 
Theorem |21 where both r and s are multiples of q — 1, which reads 

k \ _ ^ / r P fe 
v 6(g - 1)J = Y W? " 1), 

yields no new information, since both sides of the congruences are already 
known to be congruent to q/(q — 1) according to Theorem Q 

4. Carlitz's sharper congruence 

As we have pointed out in the Introduction, Carlitz stated congruence © 
under the stronger hypothesis p > 3. In fact, his proof relies on a congruence 
for Bernoulli numbers which is valid only when p > 3. However, when p = 3 
congruence © remains valid by interpreting as zero the empty summation 
in the right member. In fact, the left member equals (2 s — (— l) s )/3 k+1 , 
which is easily seen to be congruent to s(l + 5 s )/2 modulo 3. There appears 



EL!!., J = ELI_iO ^ 
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to be no obvious interpretation of Equation Q for p = 2, where its left 
member equals 2 s2 and hence is congruent to modulo 2 except when 

s = 1 and k = or 1. 

Computer calculations show that the exceptional behaviour of (jSJ for 
small values of s and k when p = 2 persists when generalizing to a power 
q of 2, as the statement of Theorem 0] reflects. The reason for this will be 
clear at the end of its proof. 

Proof of Theorem^ Continue with the setting introduced in the proof of 
Theorem ^ Thus, let to be a primitive complex (q — l)-th root of unity, let 

be the ring of integers in the cyclotomic field Q(u>), and let fi q -\ = (lu). 
We have 

1 + E L(a P -l)) = - Ss - iq - 1)+ £ (1 + aK ' 

0<b(q-l)<sp k V V U a£M 5 -iU{0} 

where 5 S = 1 if q — 1 \ s — 1 and 5 S = otherwise. 

We now assume that p is odd and postpone a discussion of the case p = 2 
to the last paragraph of the proof. For each a G fJ-q-i U {0} we can write 

(l + af =/3 a (l+p fc+1 7 a). 
with (uniquely determined) /3 a € /Ug^iU-fO} and 7 a £ 0. In fact, apart from 
the trivial case where a = — 1, Lemma |5] implies that the image of (1 + a) p 
in the quotient ring R = 0/p k+1 belongs to the image fi q -i of fiq-i- 

k 1 

Consequently, there exists a unique (3 a G such that (1 + a) p (3~ G 

1 +p fc+1 0, as desired. 

For every positive integer n we have 

(5) (1 + t) n = 1 + (mod pntO) 

provided t G for p odd, and t G 40 for p = 2. This can be proved by 
extending standard calculations in the integers done in I R!)() Chapter 4, 
§1], but can also be deduced from its slightly more elegant p-adic version 
given m |Rob001 (III.4.3)]. Since p k+1 > 2 by hypothesis, it follows that 

(1 + a yP k = ^(i + S p k+l la ) (mod p k+2 ), 

and because (3% = (3 a we also have 

(1 + a yP k 1 = ^(1 + sp k + x qia ) (mod p k+2 q). 

An argument seen in the Proof of Theorem ^ shows that f3 a ranges over 
U {0} when a ranges over [i q -\ U {0}, and hence 

-S s .(q-1)+ Y, f 3 * = °- 

aS/x g _iU{0} 

Consequently, we have 
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which implies the desired conclusion. 

The peculiarity of the case p = 2 is that (1 + a) 2 cannot be expressed 
in the form /3 a (l + 2 k+1 j a ) when a = 1. However, this discrepancy has no 
consequences if we just set (3\ = 0, provided 2 s2 = (mod 2 fc+2 ), which is 
satisfied except when s = 1 and k = or 1. □ 

Proof of Theorem With notation as in the Proof of Theorem 0] we have 

E U p -d)= £ ({!+<*)* -k), 

0<b(q-l)<sp k V KH ,J ae/i,-i\{-l} 

where [3 a is the unique element of /z g _i which is congruent to (1 + a) p 
modulo p. We already know from Theorem ^ that the expression at the 
right member belongs to p k+l O. 

For each a € / u (? _i\{— 1}, let d be the unique element of fi q -\\{— 1 } which 
is congruent to — a/(l + a) modulo p; equivalently, let a € /iq-i \ {—1} be 
defined by the condition 1 + a = (1 + a) -1 (mod p). The desired conclusion 
will follow from the congruence 

(6) (l + a) spk -(5 a = {l + a)^' s ^ pk -(3£~ s (modp fc+2 ), 

which we prove in the following paragraphs. 

Lemma El implies that (3 a = (1 + a) p q (mod p k+2 ). Note that we actu- 
ally have p a = (1 + a) p q% (mod p k+2 ) for every i > 0, because r y uq = 7" 
for all 7 € 0/p k+2 if p k+1 divides u. We will use this observation with- 
out mention in the sequel by multiplying or dividing certain exponents by 
appropriate powers of q whenever convenient. Since f3 a = (3~ l , the claimed 
congruence © can be written in the equivalent form 

(7) (1 + a) spk - (1 + a)~ spkq 

= (1 + a) {pt - s)pk - (1 + a) {pt - s)pkq (mod p k+2 ). 

According to Lemma[S]we have a = —a/(l + a) pk+t (mod p k+2 ). There- 
fore, the left member of congruence (J7J) satisfies 

h 

/ \ S P 

k n I - ^ \ /-. \—gp k q 



(1 + a) sp -(1 + a)- sp « = ( 1 - (i+Q)pfc+t ) - ( 1 + n ) 



= (1 + a)~ spKq (((1 + a)P fc+t - a) spk - l" 

= (1 + a)- spfc V fc ((1 + «) pfc+t - a - l) (mod p fc+2 ) 

= (1 + a) 1 ~ spkq sp k ((1 + a)^'" 1 - 1) 

where we have used Equation (J5J) in the next-to-last passage, because (1 + 
a) p — a € 1 Similarly, the right member of congruence (Jij) satisfies 

(1 + a)( pt - s ) pfc -(l + a )(P t - s )p k i = (l + a )P fc+t -^ fe _ (1 + a )P fc+t -*pV +t 
= (1 + a y k+t -sp k p k+t _|_ a ^(p fc+ *-i)sp fe _ X ) 

= (1 + a) pfc+t - spfe ^/ ((1 + ft+< - 1 - 1) (mod p fc + 2 ) 
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where we have used Equation (JSJ) in the last passage, this time because 
(l + a)^*- 1 G 1+pO. 

In order to complete a proof of congruence (JJJ) , and hence of Theorem El 
it suffices to observe that 

(1 + af^- 1 - 1 = (1 + a)^- 1 ((1 + af k+t ~ l - l) (mod p 2 ). 
In fact, this congruence is equivalent to 

((l + a)^*- 1 -l) 2 = (modp 2 ), 
which holds because (1 + a) ph+t ~ 1 — 1 = (mod p). □ 

The above proof breaks down for p = 2, mainly because of the two appeals 
to Equation which requires t G 40 rather than t G 20 when p = 2. In 
fact, computer calculations show that the statement of Theorem El fails for 
p = 2 and q > 4, even subject to (reasonable) restrictions on k. We have 
considered the trivial case where q = 2 earlier in this section. When q = 4, 
one can show by means of Equation Q that the expression considered in 
Theorem [3 equals 2 s2 for k > and is, therefore, a multiple of 2 k+2 except 
when (s, k) = (1, 1). 
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